Merge "Better document the ignore behavior for client cert api" into nyc-dev